Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138322e302f32342d3234203d3e20323633353633.roa
File:                     3136382e3233322e3138322e302f32342d3234203d3e20323633353633.roa (raw, json)
Hash identifier:          NgNx9AGtgC1eJlyt4zMFxjl/WcnryIY5/8Ghy0WMf3s=
Subject key identifier:   BB:E6:32:4B:C4:94:32:01:85:9D:72:C1:B1:E4:B1:0A:E7:1F:EC:5E
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       7AD0FBE27AB59C0C5623E55D86F4ECB10DC9DCAA
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138322e302f32342d3234203d3e20323633353633.roa
Signing time:             Thu 04 Apr 2024 13:58:04 +0000
ROA not before:           Thu 04 Apr 2024 13:53:04 +0000
ROA not after:            Thu 03 Apr 2025 13:58:04 +0000
asID:                     263563
IP address blocks:        168.232.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d0:fb:e2:7a:b5:9c:0c:56:23:e5:5d:86:f4:ec:b1:0d:c9:dc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Apr  4 13:53:04 2024 GMT
            Not After : Apr  3 13:58:04 2025 GMT
        Subject: CN=BBE6324BC4943201859D72C1B1E4B10AE71FEC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:86:61:18:cb:8c:6d:ff:37:c7:73:7d:8b:
                    99:4f:90:50:75:f9:87:81:84:b3:12:73:59:c6:36:
                    a8:5a:e6:4a:07:57:d8:82:3e:de:04:1c:19:3d:64:
                    00:1e:91:af:dc:bf:80:d2:42:06:b8:c1:36:ce:00:
                    ba:64:3e:3a:df:1a:08:81:e3:f2:30:22:73:c1:48:
                    c0:52:5a:cf:c9:f2:52:5e:76:73:c9:79:d1:4e:8c:
                    91:d3:1e:44:67:6a:e8:72:71:d7:8d:c9:0c:eb:14:
                    0c:01:00:f7:b7:df:2e:1f:94:d7:43:dc:0c:7e:64:
                    c6:04:d9:89:55:e7:db:de:15:87:01:73:58:2d:84:
                    72:0b:b7:ee:af:0e:eb:0e:5b:a8:51:7e:72:b2:02:
                    d5:e8:62:ba:3d:62:5f:d5:61:00:e0:9f:25:cb:9e:
                    2e:f5:c5:82:e1:d3:49:19:62:b8:0a:44:81:a7:ac:
                    8c:5e:e8:ac:17:f0:17:56:df:1c:54:6f:f3:55:c1:
                    93:09:82:0e:e8:77:77:61:8d:b4:dd:31:d3:d0:0d:
                    bc:ba:da:a7:14:57:bc:db:a4:e5:a4:04:54:bf:a0:
                    11:16:af:41:15:78:d9:a4:7e:52:f5:1b:de:5c:25:
                    f9:7a:0c:87:3a:00:f3:ce:65:4d:8d:a7:c7:fc:8d:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E6:32:4B:C4:94:32:01:85:9D:72:C1:B1:E4:B1:0A:E7:1F:EC:5E
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138322e302f32342d3234203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:3b:aa:83:1d:21:14:60:f7:a3:e7:0e:cf:b7:5e:b3:03:bd:
         3a:53:cc:11:96:77:d7:90:95:d0:0c:cf:e7:fb:46:79:4b:d3:
         8e:e3:38:15:e1:cd:1a:b9:3b:38:8e:88:af:10:cb:39:cf:32:
         c1:8e:6e:1e:a7:14:20:94:56:1f:43:d7:2e:c0:5d:f4:3e:d2:
         a5:db:ab:3c:33:e8:2c:12:79:55:cc:ef:2b:51:a3:00:83:08:
         2a:2a:c0:e7:e8:88:96:4c:91:02:31:30:60:9d:85:1e:8b:34:
         3e:b7:11:fb:ae:ae:2e:4d:ca:04:45:d0:df:c0:7a:15:ef:66:
         82:66:22:0c:83:85:83:ad:1f:4d:11:2e:1a:79:e7:a4:9c:f6:
         9c:00:24:5d:a3:69:8a:33:a6:c0:35:ee:e4:1b:65:c5:0f:f8:
         f5:92:65:30:51:4a:ec:32:b7:d9:a5:14:12:f2:91:03:7b:3d:
         9a:37:0c:57:e0:32:99:f5:e2:dd:0d:44:22:1f:77:8a:dd:2b:
         1a:a9:37:79:77:df:b5:a7:f2:fd:e3:4a:4e:f4:02:cf:4a:09:
         05:7a:5e:2f:88:fb:e6:0f:2b:ea:3a:0b:13:3a:da:58:97:b9:
         b1:36:55:9d:d7:bc:2c:49:a2:19:a7:28:60:3d:85:c1:b7:a3:
         b7:1b:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org